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PRELIMINARY AMENDMENT 

BOX PATENT APPLICATION 
Commissioner for Patents 
Washington, D.C. 20231 

Sir: 

Please amend the specification as follows: 

In the Claims : 

Please replace claim 7 with the following: 

7. A system for controUing a blasting network which includes a control unit and a 
communication link for the network, the communication link being capable of being placed in a 
control mode and in an operational mode, and a monitoring device for monitoring the 
communication link for at least one previously designated unsafe message, wherein the 
communication link in its control mode prevents any detected unsafe message from being 
transmitted to the blasting network and in its operational mode permits any previously 
designated unsafe message to be transmitted to the blasting network, and wherein in both its 
control mode and its operational mode the communication link permits any message which has 
not been designated as unsafe to be transmitted via the communication link. 



Please replace claims 12-14 with the following: 

12. A control system according to any one of claims 7 to 10 wherein the monitoring device is 
a filter. 

13. A control system according to any one of claims 7 to 10 wherein the communication link 
is placed in its control and operational modes by means of a switch. 

14. A blasting system including a control system according to any one of claims 7 to 10 
connected to a blasting network. 

Please add new claims 15-17: 

~1 5. A blasting system including a control system according to any one of claims 7 to 10 
connected to a blasting network wherein the control unit of the control system is capable of 
generating legal unsafe messages, which are transmitted via the communication link in its 
operational mode. 

16. A blasting system including a control system according to any one of claims 7 to 10 
connected to a blasting network wherein the monitoring device of the control system is a filter. 

17. A blasting system including a control system according to any one of claims 7 to 10 
connected to a blasting network wherein the communication link of the control system is placed 
in its control and operational modes by means of a switch.-- 

REMARKS 

This amendment is made to correct formalities with respect to the claims on entry into the 
U.S. National Stage. 

Claim 7 is amended to correct a clerical error in the omission of the word "been." 
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The amendment corrects claims 12-14 so that these multiply-dependent claims no longer 
depend from multiply-dependent claims. New claims 15-17 are supported by original claim 14 
and directed to blasting systems in which the control system has the elements of claims 11-13. 
No new matter is introduced by this amendment. 

Claims 1-17 are now in this case. 

This Preliminary Amendment accompanies Form PTO-1390. A check in the amount of 
$1882 is included for the filing fee. No other fees are believed to be required. If the enclosed 
amount is incorrect, please charge any deficiency or credit any overpayment to deposit account 



Greenlee, Winner and Sullivan, P.C. 
5370 Manhattan Circle, Suite 201 
Boulder, CO 80303 
Telephone: (303) 499-8080 
Facsimile: (303) 499-8089 
Email: winner@greenwin.com 
Attorney docket no. 1 14-01 
SAS:lem:10/18/01 



07-1969. 



Respectfully submitted, 




Sally A. Su/livan 
Reg. No. 32,064 
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MARKED-UP CLAIMS 



7. A system for controlling a blasting network which includes a control unit and a 
communication link for the network, the communication link being capable of being placed in a 
control mode and in an operational mode, and a monitoring device for monitoring the 
communication link for at least one previously designated unsafe message, wherein the 
communication link in its control mode prevents any detected unsafe message from being 
transmitted to the blasting network and in its operational mode permits any previously 
designated unsafe message to be transmitted to the blasting network, and wherein in both its 
control mode and its operational mode the communication link permits any message which has 
not been designated as unsafe to be transmitted via the communication link. 

12. A control system according to any one of claims 7 to [11] 10 wherein the monitoring 
device is a filter. 

13. A control system according to any one of claims 7 to [12] 10 wherein the communication 
link is placed in its control and operational modes by means of a switch. 

14. A blasting system including a control system according to any one of claims 7 to [13] 10 
connected to a blasting network. 
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METHOD OF AND SYSTEM FOR CONTROLLING A BLASTING NETWOR K 
Technical Field 



5 This invention relates generally to a blasting system and is particularly concerned with a 
method of and system for controlling the operation of a blasting network. 



Background of the Invention 



10 For safety reasons a blast controlling system used for remotely controlling a blasting 
network has traditionally been isolated from other networks at a blasting site eg. at a mine. 
The data on the blasting system can however be used to monitor productivity, implement 
stock control and improve mining methods by making blast information available to those 
who need such information. It is also possible to schedule and initiate blasts from a central 

1 5 control facility through a suitable blast controlling system. 

Another possibility which arises particularly due to the fact that computers are being used 
as top level system controllers for distributed networks of blasters is to make use of a 
computer network using Internet or Intranet capabilities. There are however inherent risks 
20 associated with Internet connections. Chief of these is the risk that a hacker or 
unauthorised user may penetrate the system and deliberately or inadvertently generate an 
unsafe or dangerous command which can arm and fire the blasting system. This type of 
action can have catastrophic results. 



25 Summary^ of the Invention 



The invention provides a method of controlling a blasting network which includes the steps 
of designating at least one unsafe message, placing a communication link between a 
control unit and the network in a control mode in which the communication link is 
30 monitored for the unsafe message, in said control mode preventing the unsafe message, 
when detected, from reaching the blasting network, and placing the communication link in 
an operational mode in which any previously designated imsafe message is allowed to 
reach the blasting network, and wherein in both the control mode and the operational mode 
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any message which has not been designated as unsafe is permitted to be transmitted via the 
communication Hnk. 

The invention also provides a system for controlling a blasting network which includes a 
5 control unit and a communication link for the network, the communication link being 
capable of being placed in a control mode and in an operational mode, and a monitoring 
device for monitoring the communication link for at least one previously designated unsafe 
message, wherein the communication link in its control mode prevents any detected unsafe 
message from being transmitted to the blasting network and in its operational mode 
10 permits any previously designated unsafe message to be transmitted to the blasting 
network, and wherein in both its control mode and its operational mode the communication 
link permits any message which has not designated as unsafe to be transmitted via the 
communication link. 

1 5 Further according to the present invention there is provided a blasting system including a 
control system as described in the immediately preceding paragraph connected to a 
blasting network. 

"Unsafe message", as used herein, is used to designate a message or command which, if 
20 received by the blasting network, could result in unwanted or adverse conditions or 
consequences. For example arm and fire commands, if received by the blasting network at 
an unwanted time, could cause a blast to be initiated in the presence of persormel and 
thereby result in death or injury. 

25 Preferably therefore the method of the invention includes the step of designating at least 
two unsafe messages of which two are respectively equated with arm and fire commands. 

In the control mode of the communication link, the or each unsafe message may be 
prevented from reaching the blasting network simply by ignoring the message and not 
30 allowing its onward transmission. Alternatively the or each unsafe message may be 
scrambled so that it is no longer in an unsafe form. 

In the operational mode of the communication link, in which unsafe messages are allowed 
to be transmitted to the blasting network, any previously scrambled unsafe message may 
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be detected and unscrambled prior to transmitting the unscrambled unsafe message to the 
blasting network. 

The control unit may be capable of generating legal unsafe messages, for example 
5 legitimate £irm and fire commands, which are transmitted via the communication link in its 
operational mode. However, unsafe messages may be categorised as legal or illegal. The 
latter group of messages includes those which are illegally generated, for ex£unple those 
messages which arise from any source other than the control unit coimected to the 
communication link. 



Brief Description of the Drawings 

One embodiment of a control method and system according to the invention will now be 
described by way of example only with reference to the accompanying drawings in which: 
1 5 Figure 1 is a block diagram of an electronic blasting system including one embodiment of 
a control system according to the invention; 

Figure 2 is a block diagram of a communication fire wall for use in the control system of 
Figure 1; 

Figure 3 is a logical flowchart of the operation of a filter, used in the control system of 
20 Figure 1 , according to a first form of the control system; and 

Figure 4 is a flowchart similar to that shown in Figure 3 for a variation of the control 
system. 

Description of Preferred Embodiment 



When a blasting system is connected to an Intranet or Internet facility, access is provided 
to information stored in a data base associated with the blasting system. This information is 
useful inter alia to managers, personnel involved in stores and production, seismic 
monitoring installations, logistical control units, etc. 



A perceived risk with a connection of the aforementioned kind is that unauthorised users 
may hack through the network security to tamper with the blasting system which is a safety 
critical system. An unanticipated system fault may result in the safety of the system being 
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compromised and this may lead to the blasting system being fired prematurely which can 
cause injury or fatalities. 

Modern networks provide high levels of user security but due to the complexities of such 
5 systems it is not always possible to carry out a complete exhaustive safety analysis of the 
control software, operating systems and associated fire walls. 

Figure 1 of the accompanying drawings illustrates in block diagram form a system which 
allows an Internet or Intranet connection to be made to a blasting network with improved 
10 safety. 

The system includes an Internet or Intranet facility or connection arrangement 10, a 
blasting controller or control computer 12 which is used to control and activate blasts 
remotely, a commimication fire wall 14, a blasting network 16, and a variety of 
1 5 interrogating terminals 1 8. 

The blasting controller 12 is used in a known manner and includes a standard device 
employed to control the network 16 and to activate the initiation thereof, remotely. These 
aspects are known in the art and hence are not further described herein. Similarly the 
20 blasting network 16 consists of an assembly of detonators and communication devices 
installed in a known manner at a blasting site, making use of known technology. 

The communication fire wall includes a locking device 19 for placing a communication 
link 20, which may be an electrical conductor, to the blasting network in a control mode, 

25 or in an operational mode, according to requu-ement. As used herein the expression 
"locking device" includes any switchable component or mechanism which allows the fire 
wall to be made operational, or to be rendered inoperational, according to requirement. The 
locking device may be operated using a key, by means of an electronic keypad requiring a 
password, or it may be a remotely activated switch on a private connection. Thus, in a 

30 general sense, the locking device may be mechanically or electronically operated. 
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The remote terminals 18 may vary according to requirement. The terminals may for 
example provide access, via an Internet connection, to the blasting network for managers 
18 A, stock controllers 18B, or a seismic monitoring unit 18C. These examples are merely 
illustrative and are not limiting. 

5 

Figure 2 illustrates further detail of the conmivinication fire wall 14. The filter includes 
communication interfaces 22 and 24 which allow communication to take place with the 
communication link 20, an electronic filter 26 and, in this example, a locking device 19 
which consists of a mechanical or electronic switch 28 which is activated by means of a 
10 mechanical or electronic key 30. 

The operation of the electronic filter 26 is described hereinafter with reference to Figure 3 
and a variation of such operation is described with reference to Figure 4. 

15 As indicated, by coimecting the blasting system 16 to the Internet 10 a potential safety risk 
is introduced due to the possibility being created that hackers can penetrate the system. 
This risk is eliminated, or at least substantially reduced, by making use of the 
conmiunication fire wall 14 to selectively filter out unsafe or dangerous conunands like 
"arm", which results in the blasting network being armed, and "fire" which causes the 

20 blasting network to be initiated. 

It is to be noted that the communication medium and protocols used to coimnimicate 
between the bleist controlling system and the blasting network may be of any appropriate 
lype capable of achieving reliable commtmication. 

25 

The communication interfaces allow the communication to interface with the electronic 
components incorporated in the filter 26. These electronic components may include a 
micro controller, programmable logic devices or discrete components. The choice of the 
electronic components is determined inter alia by the complexity of the communication 
30 protocol which is used. 
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Referring to Figure 3, data on the link 20 (block 32) is received from the communication 
interface 22 and is input to the filter 26. The filter waits for communication (34) and reads 
each message on the line (36). If a message is unsuccessfully read then the system returns 
to the mode at which it awaits conrnumication. 

5 

Once a message is successfully read (block 38) a test is carried out to see if the filter 26 has 
been deactivated (step 40) to place the communication link 20 in its operational mode. As 
noted, the filter is deactivated by means of the mechanical key 30. When the filter is 
deactivated the communication link 20 is capable of transmitting designated unsafe or 
10 dangerous messages, such as arm and fire commands, which have been legally generated 
by means of the blasting computer 12, to the blasting network 16. Thus if the filter has 
been deactivated (step 42) any message received, regardless of its origin, is collected 
(block 44) and transmitted via the communication interface 24 as output data (46). The 
system then reverts to its waiting mode at which further messages are awaited. 

15 

On the other hand if the filter 26 is activated so that the commimication link is in its 
control mode, any message received is tested to see whether it is safe or unsafe (step 48). 
Safe messages are collected and transmitted on the communication link (steps 44 and 46) 
to the commimication interface 24. If a designated unsafe message is detected, it is 
20 collected but simply ignored (step 50). The system then reverts to the mode at which it 
waits for fiirther communication. 

If an unsafe or dangerous message is detected with the filter 26 activated then an alarm 
signal, visiud or audible, is generated. A count is also kept of the nximber of unsafe 
25 messages detected. 

With the control steps shown in Figure 3 the logic is such that unsafe messages which are 
detected when the filter is activated are assumed to be illegally generated and are ignored. 
Other messages are transmitted to the required destination via the conmiunication interface 
30 24. The system thus possesses the facility for allowing data associated with the blast 
networic to be accessed fi-om the remote points 18. The data may be located at the blasting 
controller 12 or at the blastmg network 16. It is however not possible to transmit a 
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designated unsafe message to the network 16 unless the communication link 20 has been 
placed in its operational mode, ie. unless the filter 26 has been deactivated. 

In the logical sequence shown in Figure 4 many of the steps are similar or identical to 
5 corresponding steps in the sequence shown in Figure 3 and consequently bear the same 
reference numerals. The flowchart shown in Figure 4 is however intended for use with a 
blasting controller 12 which scrambles designated unsafe messages. Thus, legally 
generated arm and fire commands, produced by the controller 12, may be transmitted to 
the blasting network 16 in a scrambled state when the filter 26 is activated, but these 
10 scrambled messages will be ignored since they will not be understood by the blasting 
network as arm and fire commands. 

In the step 40 a test is carried out to see if the filter 26 is deactivated (ie the communication 
link 20 is in its operational mode) or activated (ie the communication link 20 is in its 
15 control mode). In the latter case a test is then carried out on the received message to see 
whether it contains a designated unsafe or dangerous command such as "fire" or "arm" 
(step 52). If the message is unsafe then, in step 54, the command is scrambled whereafter 
the scrambled command is collected and transmitted (steps 44 and 46). By scrambling an 
unsafe message, the tmsafe message is converted into a safe message. 

20 

On the other hand if the received message is safe then no scrambling takes place and the 
message is transmitted in an unscrambled form to its destination. 

If the filter has not been activated, so that the commimication link is in its operational 
25 mode, a test is carried out in step 56 to determine whether the received message is a 
scrambled unsafe message such as a scrambled fire or arm conmiand. A scrambled 
message is unscrambled (step 58) and is then transmitted to its destination via the 
communication interface 24. If the message is not a scrambled unsafe message then, in 
step 52, a test is carried out to see if the message is an unsafe message in unscrambled 
30 form. If tiie test result is affirmative then it is assumed that the message has been illegally 
generated and, as before, the message is scrambled (step 54) before being transmitted. If 
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the test result is negative then the message is transmitted in the received form to its 
destination via the conmiunication interface 24. 

It follows that the locking device 19 is used to bypass the filter 26 when it is safe to blast. 
5 The bypass is achieved by hard wiring the communication around the filter or by the filter 
sensing the status of the switch and then, based on the status, filtering the dangerous 
commands out or unscrambling them. 

If the filter has sufficient intelligence then it can send the arm and fire commands. It would 
10 therefore not be possible for an imauthorised user to initiate a blast. This could only be 
achieved by deactivating the fire wall via the mechanical or locking device 19. 

The control computer 12 may communicate directly with the filter 26. If there is no 
response from the filter then the control computer will not attempt communication with the 
15 blasting network. The filter can thus act as a software dongle. If, as is the case with the 
Figure 4 embodiment, dangerous legal messages are scrambled then the filter must be 
activated for the system to operate. 

It is to be noted that normal commands to query the blasting network and to determine the 
20 status of components at the blasting site are unaffected. Once the blast area is clear the 
mechanical or electrical key is used to disable the filtering action and unblock the 
commands. The arm and fire commands may now be sent through the filter via the blast 
network to the blasting equipment. The control computer will scramble the dangerous 
commands. The filter, when unblocked, will correct the scrambled commands. If the filter 
25 is deactivated the scrambled dangerous commands v^ill be sent to the blasting network. 
The blasting network will disregard these commands. 

In the Figure 4 embodiment, an illegally generated unsafe message, that is an unsafe 
message not generated by the blasting controller 12, would have to have the same 
30 scrambled format as a legally generated scrambled unsafe message to initiate blasting once 
it has been unscrambled. 
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In the embodiments of the invention described with reference to Figures 3 and 4, the fdter 
26 is activated to place it in the safe or control mode in which unsafe messages can not be 
transmitted to the blasting network 16 and deactivated to place it in the unsafe or 
operational mode in which vinsafe messages are transmitted. However, it is to be 
5 understood that the filter 26 may be one in which the safe or control mode is achieved by 
deactivating or otherwise switching the filter and the unsafe or operational mode is 
achieved by activating or otherwise switching the filter. In other words, what is important 
in this respect is merely that the filter can be switched between control and operational 
modes. 

10 

Those skilled in the art will appreciate that the invention described herein is susceptible to 
variations and modifications other than those specifically described. It is to be understood 
that the invention includes all such variations and modifications which fall within its spirit 
and scope. 
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CLAIMS: 



1 . A method of controlling a blasting network which includes the steps of designating 
at least one unsafe message, placing a communication link between a control unit and the 

5 network in a control mode in which the communication link is monitored for the unsafe 
message, in said control mode preventing the imsafe message, when detected, from 
reaching the blasting network, and placing the communication link in an operational mode 
in which any previously designated unsafe message is allowed to reach the blasting 
network, and wherein in both the control mode and the operational mode any message 
10 which has not been designated as unsafe is permitted to be transmitted via the 
conmiunication link. 

2. A method according to claim 1 wherein in the control mode of the communication 
link the or each unsafe message is prevented from reaching the blasting network by 

1 5 preventing the onward transmission of the unsafe message. 

3 . A method according to claim 1 wherein in the control mode of the communication 
link the or each unsafe message is prevented from reaching the blasting network by 
scrambling the or each designated unsafe message so that it is no longer unsafe. 

20 

4. A method according to claim 3 which includes, in the operational mode of the 
communication link, the steps of detecting a scrambled unsafe message, unscrambling the 
detected scrambled unsafe message, and transmitting the imscrambled unsafe message to 
the blasting network. 

25 

5. A method according to any one of claims 1 to 4 which includes the step of 

designating at least two unsafe messages. 

6. A method according to claim 5 wherein two designated unsafe messages are 
30 respectively equated with arm and fire commands. 

7. A system for controlling a blasting network which includes a control unit and a 
communication link for the network, the commimication link being capable of being 
placed in a control mode and in an operational mode, and a monitoring device for 

35 monitoring the communication link for at least one previously designated unsafe message. 
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wherein the communication link in its control mode prevents any detected unsafe message 
from being transmitted to the blasting network and in its operational mode permits any 
previously designated unsafe message to be transmitted to the blasting network, and 
wherein in both its control mode and its operational mode the communication link permits 
any message which has not designated as unsafe to be transmitted via the communication 
link. 

8. A control system according to claim 7 wherein in the control mode of the 
communication link the or each unsafe message, when detected, is ignored. 

9. A control system according to claim 7 wherein the or each unsafe message, when 
detected, is scrambled. 



10. A control system according to claim 9 wherein in the operational mode of the 
15 communication link any scrambled unsafe message is detected and unscrambled for 

transmission of the unscrambled unsafe message to the blasting network. 

11. A control system according to any one of claims 7 to 10 wherein the control unit is 
capable of generating legal unsafe messages, which are transmitted via the communication 

20 link in its operational mode. 

12. A control system according to any one of claims 7 to 1 1 wherein the monitoring 
device is a filter. 



25 13. A control system according to any one of claims 7 to 12 wherein the 
communication link is placed in its control and operational modes by means of a switch. 

1 4. A blasting system including a control system according to any one of claims 7 to 1 3 
connected to a blasting network. 
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(57) Abstract 

A method and system for controlling a blasting network (16) for use where spurious command signals may be passed through a 
blasting controller (12) to the blasting network, for example when the controller is connected to the Internet or Intranet (10). The system 
includes a firewall (14) whereby the communication link (20) between the controller and the blasting network can be placed in a control 
mode by a switch (19). In the control mode, any previously designated unsafe message such as a fire command is prevented from reaching 
the blasting network by, for example, disregarding the unsafe message or scrambling it so that it is no longer unsafe. In an operational 
mode of the communication link, any scrambled unsafe message may be unscrambled and any unsafe message may be transmitted to the 
blasting network. 
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As the below named inventors, we hereby declare that: 

Our residences, post office addresses and citizenship are as stated below our names. 

We believe that we are the original, first and joint inventors of the subject matter which is 
claimed and for which a patent is sought on the invention entitled '"METHOD OF AND 
SYSTEM FOR CONTROLLING A BLASTING NETWORK," the specification of which 
was filed on April 20, 2000, as Application Serial No. PCT/AUOO/00351, and amended on 
26 February. 2001 and October 1 8, 2001 ; 

We hereby authorize our legal represcDtative to add reference to the Serial No. and/or filing date 
of the above-referenced apphcation to this declaration. 

We hereby state that we have reviewed and understand the contents of the above-identified 
specification, including the claims, as amended by any amendment referred to above. 

We acknowledge the duty to disclose infonnation that is material to the patentability of this 
application in accordance with Title 37, Code of Federal Regulations, §1.56. 



Prior Foreign Application(s) 

We hereby claim foreign priority benefits imder Title 35, United States Code, §1 19 of any 
foreign application(s) for patent or inventor's certificate listed below and have also identified 
below any foreign appHcation(s) for patent or inventor's certificate having a filing date before 
that of the apphcation to which priority is claimed; 

Date of Filing Date of Issue Priority Claimed 

Country Apphcation No. (day,month,year) (day,month,year) 35U.S.C.119 

ZA 99/2823 20 APRIL 1999 YES 

PCT PCT/AUOO/00351 20 April 2000 YES 
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We hereby claim the benefit under Title 35, United States Code, §1 19(e) of any United States 
provisional application(s) listed below: 

Application Serial Date of Filing 

Number (day,month,year) 

NONE 

Prior U.S. ApplicatioB(s) and PCT International Application(s) 
Designating the United States 

We hereby claim the benefit under Title 35, United States Code, §120 of any United States 
application(s), or § 365(c) of any PCT International application(s) designating the United States 
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Application Serial Date of Filing Status(Patei]ted,Pending, Abandoned) 

Number (day,month,year) 
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Insofar as the subject matter of each of the claims in this application is not disclosed in the prior 
United States, foreign or PCT International application(s) to which priority has been claimed 
above in the manner provided by the first paragraph of Title 35, United States Code, §1 12, we 
acknowledge the duty to disclose material information as defined in Title 37, Code of Federal 
Regulations, §1.56 which occurred between the filing date of the prior application(s) and the 
national or PCT international filing date of this apphcation. 

We hereby appoint, both jointly and severally, as our attorneys and agents with full power of 
substitution and revocation, to prosecute this apphcation and any corresponding application filed 
in the Patent Cooperation Treaty Receiving Office, and to transact all business in the PatMit and 
Trademark OfSce connected herewith the following attorneys and agents, their registration 
numbers being listed after their names: 

Lorance L. Greenlee, Reg. No. 27,894; Ellen P. Winner, Reg. No. 28,547; Sally A. Sullivan, 
Reg. No. 32,064; Donna M. Ferber, Reg. No. 33.878; G. William VanCleave, Reg. No. 40,213; 
Susan K. Doughty, Reg. No. 43,595; HeejaYoo-Wairen, Reg. No. 45,495; TamalaR. Jonas, 
Reg. No. 47,688; Mary Beth Vellequette. Reg. No. 47.903; Jonathan A. Baker, Reg. No. 49,022; 
all of Greenlee, Winner and Sullivan, P.C., 5370 Manhattan Circle, Suite 201, Boulder, CO 
80303. 
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We hereby declare that all statements made herein of our ovvn knowledge are true and that all 
statements made on information and belief are believed to be true; and further that these 
statements were made with the knowledge that willful false statements and the like so made are 
punishable by fine or imprisonment, or both, under Section 1001 of Title 18 of the United States 
Code and that such will^l false statements may jeopardize the validity of the ^plication or any 
patent issuing thereon. 
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